Home

Description

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API.

PUBLISHED Reserved 2025-09-29 | Published 2025-10-13 | Updated 2025-10-14 | Assigner GitHub_M




HIGH: 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Problem types

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Product status

>= 1.1.0-beta.0, < 1.1.5
affected

< 1.0.2
affected

References

github.com/...s/omni/security/advisories/GHSA-77r9-w39m-9xh5

cve.org (CVE-2025-61688)

nvd.nist.gov (CVE-2025-61688)

Download JSON